Privacy Policy
Your Data Protection is Our Priority
Last Updated: January 2025 | Effective: January 1, 2025
COPPA
Child Protection
GDPR
EU Compliant
FERPA
Education Privacy
CCPA
California Rights
1. Introduction
EQUIZZLE ("we," "our," or "us") operates the EQUIZZLE educational assessment platform located at equizzle.base44.app. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our educational assessment services.
We are committed to protecting the privacy of all users, with special emphasis on student data protection. This policy applies to information collected through our website, mobile applications, and any related services.
Important Notice
By using EQUIZZLE, you consent to the data practices described in this policy. If you do not agree with these practices, please do not use our services.
2. Information We Collect
2.1 Personal Information You Provide
- Account Information: Name, email address (via Google Sign-In), profile picture
- Student Profile: Grade level, school name, school board, district
- Location Data: Country, state/province, city, postal code (for leaderboard and analytics)
- Contact Information: Parent/guardian email, emergency contact (optional)
- Support Requests: Information provided when contacting customer support
2.2 Assessment and Performance Data
- Test Responses: Answers submitted during assessments
- Performance Metrics: Scores, percentile rankings, time spent per question
- Progress Tracking: Assessment history, improvement trends, difficulty breakdowns
- Proctoring Data: Tab switches, browser focus events, security violation counts
- Review Flags: Questions marked for review during tests
2.3 Payment Information
- Transaction Records: Purchase history, amounts, dates, invoice IDs
- Payment Processor Data: Stripe customer ID, card type (last 4 digits only)
- Subscription Status: Plan type, billing period, renewal dates
- Coupon Usage: Discount codes applied, redemption history
Note: Full payment card details are processed and stored exclusively by Stripe. We never have access to your complete card number.
2.4 Automatically Collected Information
- Device Information: Browser type, operating system, screen resolution
- Network Information: IP address, approximate geographic location
- Usage Analytics: Pages visited, features used, session duration
- Referral Data: How you found our platform
- Error Logs: Technical errors encountered during use
3. How We Use Your Information
Primary Service Purposes
- • Deliver standardized assessments (SAT, ACT, IELTS, K-12)
- • Generate personalized performance reports
- • Create and deliver achievement certificates
- • Maintain accurate leaderboard rankings
- • Process payments and manage subscriptions
- • Provide customer support services
- • Send assessment results and notifications
Platform Improvement
- • Enhance question quality and calibration
- • Improve platform performance and reliability
- • Develop new assessment types and features
- • Conduct educational research (anonymized)
- • Prevent fraud and ensure test integrity
- • Analyze usage patterns to improve UX
- • Debug and fix technical issues
4. Legal Basis for Processing (GDPR)
For users in the European Economic Area (EEA), we process personal data based on the following legal grounds:
Contract Performance
Processing necessary to provide our assessment services as agreed when you create an account.
Legitimate Interests
Processing for fraud prevention, security, platform improvement, and analytics where our interests do not override your rights.
Consent
Processing based on your explicit consent for optional features like marketing communications.
Legal Obligations
Processing required to comply with applicable laws, regulations, and legal requests.
5. Children's Privacy (COPPA & FERPA)
We are committed to protecting the privacy of children. We comply with the Children's Online Privacy Protection Act (COPPA) and the Family Educational Rights and Privacy Act (FERPA).
For Users Under 13 Years Old
- Parental Consent Required: We require verifiable parental consent before collecting personal information from children under 13.
- Minimal Data Collection: We only collect information strictly necessary for educational assessment purposes.
- No Behavioral Advertising: We do not use children's data for targeted advertising or marketing.
- Parental Access Rights: Parents can review, correct, or delete their child's information at any time.
- No Conditioning Participation: We do not require children to provide more information than necessary.
Educational Records (FERPA)
- Assessment results constitute educational records protected under FERPA when used by schools.
- Schools using EQUIZZLE maintain control over student educational records.
- We act as a "school official" with legitimate educational interest when providing services to schools.
6. Data Sharing and Disclosure
We Do Not Sell Your Data
EQUIZZLE does not sell, rent, or trade personal information to third parties for commercial or marketing purposes. This includes student data, assessment results, and any other personal information.
Limited Sharing Scenarios
Service Providers
Stripe (payment processing), Google (authentication), email delivery services. These providers are contractually bound to protect your data.
School Partnerships
With explicit written consent, we may share student performance data with authorized school administrators.
Legal Compliance
When required by law, court order, or to protect the rights, property, or safety of EQUIZZLE, our users, or others.
Aggregated/Anonymized Data
We may share statistical, anonymized data for educational research that cannot identify individual users.
7. Data Retention
We retain personal information for as long as necessary to provide our services and fulfill the purposes outlined in this policy:
- Active Accounts: Data retained while your account is active and for 3 years after last activity.
- Assessment Results: Retained for 7 years to support long-term academic tracking and certificate verification.
- Payment Records: Retained for 7 years as required for tax and accounting purposes.
- Support Tickets: Retained for 2 years after resolution.
- Analytics Data: Anonymized after 24 months.
Upon account deletion request, we will remove or anonymize your personal data within 30 days, except where retention is required by law.
8. Your Rights and Choices
All Users
- Access your personal information
- Correct inaccurate or incomplete data
- Delete your account and associated data
- Export your assessment history
- Opt out of leaderboard visibility
- Unsubscribe from marketing emails
Additional Rights (EEA/UK/California)
- Data portability (machine-readable format)
- Restrict processing of your data
- Object to automated decision-making
- Withdraw consent at any time
- Lodge a complaint with supervisory authority
- Know what data is sold (CCPA: we don't sell)
9. Data Security
Encryption
TLS 1.3 in transit, AES-256 at rest
Access Control
Role-based access, audit logging
Infrastructure
SOC 2 compliant hosting, regular backups
We implement industry-standard security measures including regular security audits, employee training, incident response procedures, and secure development practices.
10. International Data Transfers
Your information may be transferred to and processed in countries other than your own. When we transfer data internationally, we ensure appropriate safeguards are in place:
- • Standard Contractual Clauses (SCCs) approved by the European Commission
- • Data Processing Agreements with all service providers
- • Adequacy decisions where applicable
- • Supplementary security measures as needed
11. Cookies and Tracking
We use essential cookies and similar technologies to:
- • Maintain your session and authentication state
- • Remember your preferences and settings
- • Ensure security and prevent fraud
- • Analyze platform usage (via Google Analytics)
You can control cookies through your browser settings. Disabling essential cookies may prevent you from using some platform features.
12. Changes to This Policy
We may update this Privacy Policy periodically to reflect changes in our practices, technologies, legal requirements, or for other operational reasons.
Notification: For material changes, we will notify you via email or prominent notice on our platform at least 30 days before the changes take effect.
Continued use of EQUIZZLE after the effective date constitutes acceptance of the revised policy.
13. Contact Information
Privacy Inquiries
For all privacy-related questions, data requests, or to exercise your rights:
privacy@equizzle.com
Response time: Within 30 days
Data Protection Officer
EQUIZZLE Assessment Platform
dpo@equizzle.com
For GDPR-specific inquiries